v1.0 — GOVERN Function Guide + EU AI Act Mapping

🎉 Initial Release

The first release of the NIST AI RMF Implementation Guide — a practitioner's guide to implementing the NIST AI Risk Management Framework in regulated industries.

What's included in v1.0

• 📋 GOVERN function complete implementation guide (GV.1–GV.6)
  • Organizational policies and processes
  • Roles and responsibilities (RACI matrix)
  • Organizational culture and training
  • Model inventory and lifecycle management
• 🇪🇺 EU AI Act ↔ NIST AI RMF Cross-Reference — comprehensive mapping of EU AI Act articles to NIST RMF subcategories
  • Risk classification alignment
  • High-risk AI system requirements (Articles 9–14)
  • Prohibited AI practices (Article 5)
  • Conformity assessment guidance
  • Implementation timeline

Coming in v1.1

• MAP function implementation guide
• MEASURE function with evaluation metrics and tooling
• MANAGE function with risk response procedures
• ISO 42001 cross-reference mapping
• Industry-specific implementation examples (healthcare, finance, insurance)

This guide is maintained by an AI governance practitioner. Not affiliated with NIST.
Always refer to airc.nist.gov for authoritative guidance.